Sorry - yes Virus defs are up to date.  I have blocked .zip files for now.
I think that they are non-viable files that are slipping through, but I need
to stop them as all my users want to know what is going on...

I will remove the erroneous entries from my config file.

Marc

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Monday, July 26, 2004 3:33 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Another Varient??!


>They are still getting through to my users.  Even though
>
>Anyway to banexten on this one?

That all depends on what you are trying to ban:

>Something like
>
>BANNAME *prudentialrand.com.zip

That won't work, because BANNAME doesn't use wildcards.

>BANEXT com.zip

That won't work either, because "com.zip" isn't an extension.

>It is creating some confusion and I'm not sure if it's a viable virus that
>is getting through or not. I'd like to stop it regardless.

Are your virus definitions up-to-date?  I would suggest manually 
downloading the latest virus definitions (for example, if you only check 
once a day, you probably won't detect Mydoom.O).

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]




---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to